CVE-2025-0053: 
SAP NetWeaver Application Server ABAP vulnerability analysis and mitigation

SAP NetWeaver Application Server for ABAP and ABAP Platform contains a vulnerability that allows an attacker to gain unauthorized access to system information. The vulnerability was discovered and disclosed on January 13, 2025. The affected system is SAP NetWeaver Application Server for ABAP and ABAP Platform (NVD).

The vulnerability allows an unauthenticated attacker to retrieve system configuration details by using a specific URL parameter. The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. The vulnerability is classified under CWE-209 (Generation of Error Message Containing Sensitive Information) (NVD).

The vulnerability has a limited impact on the confidentiality of the application, as it allows unauthorized access to system information. The exposed system configuration details may be leveraged by attackers to facilitate further attacks or exploits. There is no direct impact on system integrity or availability (NVD).

SAP has released security patches to address this vulnerability. Users should refer to SAP Security Note 3536461 for detailed mitigation instructions (SAP Security Note).